Example For Configuring The Limitation On Mac Address Learning Based On Vsi - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Ethernet
[Quidway] interface gigabitethernet 2/0/1
[Quidway-GigabitEthernet2/0/1] port hybrid pvid vlan 2
[Quidway-GigabitEthernet2/0/1] port hybrid untagged vlan 2
[Quidway-GigabitEthernet2/0/1] quit
# Configure the rule of limiting MAC address learning in VLAN 2: A maximum of 100 MAC
addresses can be learned; packets are still forwarded and an alarm is generated when the number
of learned MAC addresses reaches the limit, but new MAC addresses are not added to the MAC
address table.
[Quidway-vlan2] mac-limit maximum 100 action forward alarm enable
[Quidway-vlan2] quit
Step 2 Verify the configuration.
# Run the display mac-limit command in any view. You can check whether the rule of limiting
MAC address learning is successfully configured.
[Quidway] display mac-limit
MAC Limit is enabled
Total MAC Limit rule count : 2
PORT
----------------------------------------------------------------------------
-
----End
Configuration Files
The following lists the configuration file of the S9300.
#
sysname Quidway
#
vlan batch 2
#
vlan 2
mac-limit maximum 100
#
interface GigabitEthernet1/0/1
port hybrid pvid vlan 2
port hybrid untagged vlan 2
#
interface GigabitEthernet2/0/1
port hybrid pvid vlan 2
port hybrid untagged vlan 2
#
return
6.6.3 Example for Configuring the Limitation on MAC Address
Learning Based on VSI
Networking Requirements
To ensure the security for the users within the VSI, configure the limitation on MAC address
learning in the VSI named huawei.
Issue 03 (2009-08-20)
VLAN/VSI
2
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 MAC Address Table Configuration
Maximum Rate(ms) Action
100 - forward enable
Alarm
6-15